Org security & profile UI: follow-ups from Task

Found while visually checking Task 7243 on the local stack (1280px and 375px). 1. Profile › Profile at 375px: below the full-width Save there is an empty lighter strip (the action bar's sticky padding). It reads as a stray box. Remove it, or give it the page's background. 2. Customers › Org › Security at 375px: the IP allowlist still shows a disabled full-width Save and Cancel while nothing has changed. Show them only while the list is edited, as Task 7243 did for Sign-in and HIPAA. 3. Settings › Organizations (tenant): with the plan switch off, the IP allowlist tab shows only "isn't on your plan. Upgrade". The tab itself could carry a plan badge, so a tenant knows before opening it. 4. Operator accounts have no display name prompt. The seeded e2e-smoke operator has none, so other provenance cells show a raw email. Prompt operators for a first and last name on first sign-in, or flag the blank name on Profile. Out of scope: IP allowlist rules (app/ip_allowlist.py), the console relay. Done means: - Each item is visible on the live stack at desktop and 375px, with screenshots in the report.

IP allowlist Save/Cancel only while edited, off-plan 'Upgrade' tab badge, nameless-account flag on Profile; the Profile strip was already fixed on develop. PR #5966 queued in the merge lane. Local quick gate timed out on unrelated API stages (host load); lane runs full. Visual check done at 1280 and 375px, all four render correctly. Draft follow-up Task 7331.